CVE Vulnerability Catalog

In Oracle Solaris (component Filesystems) version 11.4, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).

Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

In Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is a difficult-to-exploit vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized access to all system data.

Vulnerability in the Internal Operations component of Oracle Production Scheduling (Oracle E-Business Suite). A high-privileged attacker via HTTP can perform unauthorized creation, deletion, modification of critical data and read access, potentially affecting other products.

Vulnerability in Oracle Production Scheduling of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can perform unauthorized update, insert, or delete, gain unauthorized read access, and cause a partial denial of service (partial DOS).

In Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise data confidentiality and integrity. Successful attacks require human interaction from a person other than the attacker and may impact additional products (scope change). Successful attacks can result in unauthorized creation, deletion, or modification of critical data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 6.7 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Inventory Management (Internal Operations component) versions 12.2.3-12.2.15. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of Oracle Inventory Management.

Vulnerability in Oracle Time and Labor of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows a high-privileged attacker with network access via HTTP to unauthorizedly access critical data and modify some data, potentially affecting other products.

Vulnerability in Oracle Scripting (Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access, modify, or delete critical data via HTTP.

Vulnerability in Oracle Flow Manufacturing (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.

Vulnerability in Oracle Transportation Execution (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.

Vulnerability in Oracle Service Contracts product of Oracle E-Business Suite. Requires a high-privileged attacker and user interaction, but can lead to unauthorized access to all data and unauthorized creation, deletion, or modification of critical data.

Vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A high-privileged attacker with local access can modify critical data.

Vulnerability in the Internal Operations component of Oracle Property Manager (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read).

Vulnerability in Oracle Property Manager (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.

Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.4-12.2.15. Difficult to exploit; a low-privileged attacker via HTTP can gain unauthorized read, modify access and cause partial denial of service.

Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Rapid Implementation component.

A vulnerability in Oracle Payroll allows a low-privileged attacker with local access to gain complete access to all Payroll data, with impact on other products.

Vulnerability in Oracle HRMS (Norway) (Norway Payroll component). A high-privileged attacker via HTTP can take over the system.

Vulnerability in Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Work in Process data.